Andariel Hacking Group Shifts Focus to Financial Attacks on U.S. Organizations
In August 2024, a North Korean state-sponsored threat actor named Andariel attacked three separate U.S. companies, most likely with financial motivations.
According to a report given with The Hacker News by Symantec, a division of Broadcom, "it is likely that the attacks were financially motivated, even though the attackers didn't succeed in deploying ransomware on the networks of any of the organizations affected."
Andariel is a threat actor who is thought to be a part of the notorious Lazarus Group's sub-cluster. Additionally, it is tracked as Operation Troy, DarkSeoul, Nickel Hyatt, Onyx Sleet (formerly Plutonium), Stonefly, APT45, and Silent Chollima. It started operating in 2009 at the latest.
The hacking group, which is part of North Korea's Reconnaissance General Bureau (R...